SIGIL: Compiling Agent Skills into Typed Harnesses
A skill file is prose: a procedure the model reads into context and re-derives from scratch on every run, which means it can quietly skip the verification steps it was told to take while still handing back an artifact that passes your output checks. Across 30 skills, an agent following the prose performed only 56% of the steps its own skill mandated and completed the whole procedure just 28% of the time. Compiling that same prose into an executable harness — where a mandatory step becomes code that fires on entry and a forbidden step becomes a path that simply does not exist — lifted step adherence to 86%, full-procedure completion to 65%, and cost 0.58× the tokens, because the prose runs cheap partly by skipping work. The result worth acting on is the flat line: the harness held at 86% across two model generations while the prose swung from 56% to 68%, which means the guarantee stopped living in the model's capability and started living in structure you own.